$ rpki-client -vvf repo-rpki.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.mft File: 17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.mft (raw, json) Hash identifier: OExx3eHvfXOk1RSbdW1KeoLzWkLN4hzD/4pRkXUpTiM= Subject key identifier: 56:5F:69:93:4B:C5:6D:E0:F5:5D:4D:93:75:32:04:79:5E:E6:27:AE Authority key identifier: 17:A6:00:7E:C6:37:3E:C9:50:1F:99:56:E1:2B:6D:5C:BE:0F:DC:21 Certificate issuer: /CN=17A6007EC6373EC9501F9956E12B6D5CBE0FDC21 Certificate serial: 48B1F4AE536E614574D1223F10F96621C51BEE7F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.mft Manifest number: 0125 Signing time: Tue 18 Feb 2025 03:04:07 +0000 Manifest this update: Tue 18 Feb 2025 02:59:07 +0000 Manifest next update: Fri 21 Feb 2025 09:32:07 +0000 Files and hashes: 1: 17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.crl (hash: kaulehyUX0nIrrX1AUhBOUJgkg8ZpTn+njBJ/Q2xDVY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.crl rsync://repo-rpki.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 09:32:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:b1:f4:ae:53:6e:61:45:74:d1:22:3f:10:f9:66:21:c5:1b:ee:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17A6007EC6373EC9501F9956E12B6D5CBE0FDC21 Validity Not Before: Feb 18 02:59:07 2025 GMT Not After : Feb 21 09:32:07 2025 GMT Subject: CN=565F69934BC56DE0F55D4D93753204795EE627AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:fe:61:df:7c:3a:8d:f7:dc:d3:15:fa:9f:76: 7c:db:f3:b8:c8:b0:76:17:b3:23:03:bc:da:15:8a: b1:63:82:88:dd:33:d1:3a:15:0f:2b:ba:97:7c:94: 69:34:60:be:a4:2d:25:0f:49:f8:b3:fa:c8:bf:61: 91:16:06:52:ed:40:0c:1d:b8:59:4f:8f:48:26:b3: b2:7e:bd:1a:68:4a:bc:85:bf:cd:52:1a:cd:ad:c7: ea:03:5e:a1:c8:53:66:07:49:ff:96:5d:a1:a9:f1: fd:57:41:bf:43:8b:38:5c:81:10:e2:a2:ce:95:9d: c0:c0:72:dd:d7:37:e4:9e:b7:45:3d:dd:5a:ea:b3: b4:b7:25:10:9f:a3:0d:f4:7b:3d:ac:2a:ea:a6:27: a5:b3:8e:11:02:c3:d1:ab:ba:e2:e6:6c:84:1e:c2: 13:1a:e1:af:1f:35:bd:57:20:56:22:80:4a:21:bf: 3e:5e:14:57:8b:72:ce:4e:b7:f9:72:0c:6a:0c:87: fa:19:6c:07:30:42:b3:a8:73:16:c8:29:d2:0a:7d: 3e:de:ab:41:ad:c7:ba:db:01:0d:cc:12:4d:81:3a: 05:fb:d9:99:b9:ae:03:a1:40:ea:d1:d2:8a:a6:e7: e5:d2:71:f6:7e:88:91:ed:9f:b3:b9:ff:60:76:8e: f2:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:5F:69:93:4B:C5:6D:E0:F5:5D:4D:93:75:32:04:79:5E:E6:27:AE X509v3 Authority Key Identifier: keyid:17:A6:00:7E:C6:37:3E:C9:50:1F:99:56:E1:2B:6D:5C:BE:0F:DC:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:44:63:1a:24:c8:37:e3:c5:65:d1:c7:2a:b5:78:7a:c0:e3: 94:ae:c0:04:9a:26:56:09:25:df:5d:22:63:38:e2:49:cf:e7: 5a:5c:9b:db:8f:12:62:a5:4b:62:a8:fd:ec:1d:92:65:ab:1c: 9c:b8:ff:e1:ba:2b:09:5b:1c:06:13:44:95:50:ed:50:b4:4f: 53:20:1c:54:bb:9f:ee:b4:aa:40:f5:6e:9c:09:a5:6b:8d:97: 62:72:df:13:3f:36:26:15:c3:b9:18:b6:a7:e6:15:25:af:71: f7:22:0a:c0:91:18:c7:0c:fe:0c:1d:c3:2c:44:75:85:c0:80: 08:65:55:0f:f1:aa:13:ec:0b:98:f2:5d:b5:5b:e8:b7:13:56: d7:44:e6:c2:71:8e:40:af:3d:aa:6f:dd:cc:9b:ac:49:4d:b6: 5d:61:69:87:c4:94:f3:1f:e7:57:9b:04:5d:f6:eb:a5:eb:b6: 30:ee:b9:cf:ba:fd:3e:76:5b:e1:e2:1b:ed:71:4a:94:34:ff: 5d:db:9d:e8:7e:e9:0c:02:c8:45:4e:d9:fe:a8:e1:d2:2f:7e: 34:76:1f:ff:db:ba:1a:6d:f3:0b:b2:f8:65:c1:2b:98:f5:5e: 8b:36:4e:b9:98:2c:ca:db:5b:93:bb:10:71:ea:62:2b:2e:30: e5:53:bb:72 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSLH0rlNuYUV00SI/EPlmIcUb7n8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTdBNjAwN0VDNjM3M0VDOTUwMUY5OTU2RTEyQjZENUNC RTBGREMyMTAeFw0yNTAyMTgwMjU5MDdaFw0yNTAyMjEwOTMyMDdaMDMxMTAvBgNV BAMTKDU2NUY2OTkzNEJDNTZERTBGNTVENEQ5Mzc1MzIwNDc5NUVFNjI3QUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDj/mHffDqN99zTFfqfdnzb87jI sHYXsyMDvNoVirFjgojdM9E6FQ8rupd8lGk0YL6kLSUPSfiz+si/YZEWBlLtQAwd uFlPj0gms7J+vRpoSryFv81SGs2tx+oDXqHIU2YHSf+WXaGp8f1XQb9DizhcgRDi os6VncDAct3XN+Set0U93Vrqs7S3JRCfow30ez2sKuqmJ6WzjhECw9GruuLmbIQe whMa4a8fNb1XIFYigEohvz5eFFeLcs5Ot/lyDGoMh/oZbAcwQrOocxbIKdIKfT7e q0Gtx7rbAQ3MEk2BOgX72Zm5rgOhQOrR0oqm5+XScfZ+iJHtn7O5/2B2jvLBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVl9pk0vFbeD1XU2TdTIEeV7mJ64wHwYDVR0j BBgwFoAUF6YAfsY3PslQH5lW4SttXL4P3CEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h OGRlNGFmNy1iZjQ4LTRjYjgtOGY2My04MWNhZTE3MzY0ZGUvMC8xN0E2MDA3RUM2 MzczRUM5NTAxRjk5NTZFMTJCNkQ1Q0JFMEZEQzIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTdBNjAwN0VDNjM3M0VDOTUwMUY5OTU2RTEyQjZENUNCRTBG REMyMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYThkZTRhZjctYmY0OC00Y2I4LThm NjMtODFjYWUxNzM2NGRlLzAvMTdBNjAwN0VDNjM3M0VDOTUwMUY5OTU2RTEyQjZE NUNCRTBGREMyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ1EYxokyDfjxWXRxyq1eHrA45SuwASaJlYJ Jd9dImM44knP51pcm9uPEmKlS2Ko/ewdkmWrHJy4/+G6KwlbHAYTRJVQ7VC0T1Mg HFS7n+60qkD1bpwJpWuNl2Jy3xM/NiYVw7kYtqfmFSWvcfciCsCRGMcM/gwdwyxE dYXAgAhlVQ/xqhPsC5jyXbVb6LcTVtdE5sJxjkCvPapv3cybrElNtl1haYfElPMf 51ebBF3266XrtjDuuc+6/T52W+HiG+1xSpQ0/13bneh+6QwCyEVO2f6o4dIvfjR2 H//buhpt8wuy+GXBK5j1Xos2TrmYLMrbW5O7EHHqYisuMOVTu3I= -----END CERTIFICATE-----Generated at Wed Feb 19 22:23:54 2025 by rpki-client